Removed csrf protection as it is not really needed and disturbs some actions, e.g. backup and deleting items
Re-enabled deleting payments
Re-enable category assignments